*.vinshop.vn

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 6b:10:2e:ec:b2:54:63:cd:ec:b3:e2:31 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.vinshop.vn

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:10:2e:ec:b2:54:63:cd:ec:b3:e2:31
Serial Number (int): 33134460459137575192366408241
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 52:06:9e:ba:41:db:c1:72:36:4d:20:ae:bc:9b:15:64:62:8f:89:14
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): bd:f8:ff:fd:f6:d6:4f:4e:ba:61:cd:01:45:2d:2f:72:2b:f4:bc:87
Fingerprint (sha256): 2d:be:52:e8:fb:35:92:eb:a2:fe:37:d3:0b:9b:a1:14:82:5d:98:1d:8e:f0:4a:79:a3:5f:59:ee:00:11:c3:70

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.vinshop.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vinshop.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vinshop.vn
vinshop.vn

Other certificates including the domain name vinshop.vn

(limited to 100 certificates)
thele.vinshop.vn
dev-pass.cleared4.org
int.vinshop.vn
vinshop.vn
www.franzz.ch
int.vinshop.vn
iap.vinshop.vn
doitac-fb.vinshop.vn
www.nsemble.ai
thele.vinshop.vn
int.vinshop.vn
demo.textile.teamin.in
*.int.vinshop.vn
app.goodwealth.com
*.vinshop.vn
vinshop.vn
int.vinshop.vn
ncc.vinshop.vn
doitac.vinshop.vn
int.vinshop.vn
iap.vinshop.vn
thele.vinshop.vn
vanves-victor-hugo.corehab.fr
plumbagocreekfarm.com
iap.vinshop.vn
int.vinshop.vn
int.vinshop.vn
www.gloryth.com
iap.vinshop.vn
vinshop.vn
thele.vinshop.vn
plumbagocreekfarm.com
strongpigeon.dev
vinshop.vn
int.vinshop.vn
b2b.vinshop.vn
int.vinshop.vn
finhance.io
app.dutycast.com
thele.vinshop.vn
doitac.vinshop.vn
sp.vinshop.vn
ungvon.vinshop.vn
www.radioamator.testry.ro
int.vinshop.vn
www.investsimply.ca
app.instantcosmetics.com.au
iap.vinshop.vn
int.vinshop.vn
gracelandct.org
app.dutycast.com
raymondsu.dev
www.maiape.com
iap.vinshop.vn
roxy.joyridecity.bike
iap.vinshop.vn
int.vinshop.vn
ungvon.vinshop.vn
oneseal.vinshop.vn
fairylullaby.com.au
*.vinshop.vn
thele.vinshop.vn
sni.cloudflaressl.com
ungvon.vinshop.vn
ungvon.vinshop.vn
asiad.ocos.app
payrows.com
iap.vinshop.vn
thele.vinshop.vn
ungvon.vinshop.vn
ungvon.vinshop.vn
thele.vinshop.vn
www.radioamator.testry.ro
iap.vinshop.vn
brandlab.easysignage.app
tullolabs.com
procpro.com.br
admin.bestguest.cz
support.bebest.today
int.vinshop.vn
www.investsimply.ca
thele.vinshop.vn
demo.textile.teamin.in
cloud.wayout.app
int.vinshop.vn
blog.settlework.com
sistema.kinmaster.cl
www.radioamator.testry.ro
thele.vinshop.vn
www.derivative.dev
*.iap.vinshop.vn
int.vinshop.vn
links.pixelcut.app
500words.app
novina.tech
thele.vinshop.vn
www.ametrine24.com
vinshop.vn
thele.vinshop.vn
dev-weavetest.thelevel.ai

Certificate

The complete raw certificate details for *.vinshop.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n2EsxK4VKpOhgogZCG6
P6NRsO6twGeK80qb+eWuWzXiN3YJWSQMBBOpzcpjTD65w3TxteTuYfzykZ24Vk2p
pD868c8CWNCwiWIFeP1M43N5VbyY1xvlroAZH2hUb5RpHQwB/ApV7llZTS0MbNhg
0LKjNASgfe5zABQXIuPyVw0LcH8IwoSmuVwPAnxIWL//P3HOByQXOGiAadjMtJLt
V0ZoVRfDjOYlcDjo9bneY2dekbdruiwB+xl1al8pVL80z3GTbL+Krbc2bRJ+xb9j
cxKdckDhQqSjZx9QSUmfUV6Q85u2e0YNQfS4fhpeEoyyo0NLwXzaqP+oEgkyovOh
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33134460459137575192366408241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-27 07:12:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 07:12:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vinshop.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27076892671663219943791523140618029076648548430987948222111915092628994529540335655913204146773105332461354084624861625469345600083887050508923932876266657477201488682069548316448498415983848833581342741257192074789362093148876234216541380081355652362569841601211614013683231340279779128018851703958274029006902945793707036470133736509985299748922766350587386742926515634790651432112623912882056852048899105063957231341881495717285583652606879909533601107935988979675458904049779884091751975541054838128410483187834149570342858779547456688428167361414827969286416484929329949515380514563742965796481624956489983828433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vinshop.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinshop.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52069eba41dbc172364d20aebc9b1564628f8914
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000181a400cb7c0000040300473045022100c43ff6522117e01327c9546791c208afc9bf68d121466422b3a0a2606feb9a5a02200129f05482fdbbb7851297efbeba4f906e44f3fb0ba82ecdcd4c343d1414469500760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000181a400cb8200000403004730450221008ffc35da2176153a922261b78a1cfa3b8a00a8f9a3dbc07fe2a4476fd1f1e4d702205328d502a34b65e974923c06720c90c5255fbf4d030e0b58d51ffbceae0d48fa007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000181a400cb95000004030046304402206b8bb9c55f5b4e02e1e34ec198cab9ec99f82545a956c5aff135978dd1fd045e022057a4d589e64a5f60cd9e97c7d3bdb682acd8162983bbbb2fcb21b0d5be55e492
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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